ced18e092a7141918ccb093ca6a4f491da52c47d708f84136a329ae4fb33377b

Analysis

max time kernel
149s
max time network
122s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
13/11/2026, 12:11

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
debian/manpage_old.vbs
Size 8KB
Sample261113-pcv24abs3s
SHA256 ced18e092a7141918ccb093ca6a4f491da52c47d708f84136a329ae4fb33377b
MD5 f34519fa0768ba8e9b6356aed3575836
SHA1 645cc0758c5058dc4e644f6932bfd076b7aea922
SHA512 8dc247d0d2d8a14fc8c89b1552a9bc8a403d13db9c19f6c0e935dab7e72ee6bd75f3f0dd86146691b0d10872f2c43b439f37e0b270546863f84853f012e376b4
SSDEEP 96:EIW1A/BxhXw8pPrR8yHy/Jn8yHyePDgekewOibjzWW3rvVw4sGIdtMjwIzOZ:E12BUARy/xyBewOmbjVLaMjwL
TLSH
T16002B92FA69F2F3A720600C3660E21DD535D62FF965301D8916DC9ECD30E83E5A6B2D9
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

execution

Malware Config

Signatures

Executes a VBScript file via the Windows Script Host. 1 TTPs 1 IoCs

execution

Visual Basic

T1059.005

pid	Process
1032	WScript.exe

C:\Windows\System32\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\debian\manpage_old.vbs"
1⤵
- Executes a VBScript file via the Windows Script Host.
PID:1032

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Visual Basic

T1059.005

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads